Tag: dns
3 articles
Google Certificates Targeted in ccTLD Hijacks
Google thwarted a sneaky attack where hackers hijacked three country-code domains to obtain fake HTTPS certificates for several Google sites and other organizations, quickly blocking the unauthorized certificates through Chrome's emergency response system. The compromised domains included .gh, .sl, and .as, which were manipulated by attackers to gain DNS control.
Hackers Exploit ccTLD Vulnerabilities to Hijack Google Domains
Google revealed that several top brands and online services were hit by the same attacks, following their initial mitigation efforts. Attackers exploited vulnerabilities in country-code top-level domain (ccTLD) registries and DNS to hijack Google domains, not by breaching Google's infrastructure, but by compromising third-party operators.
BIND 9 Update Fixes 14 Flaws, Including Unauthenticated Crashes
The Internet Systems Consortium has rolled out a crucial BIND 9 update that patches 14 security flaws, including unauthenticated crashes, to keep your DNS server safe and secure. Fortunately, no active exploits have been reported so far, but it's still essential to update to the latest releases: BIND 9.20.29, BIND 9.21.26, or BIND 9.20.29-S1 to fix the vulnerabilities.